Some tools do not work in immutable / transactional system out-of-the-box (e.g. because they write to read-only part of the system) and need to be invoked via transactional-update.